Crash in mozilla::dom::TextDirectiveCandidate::CreateNewCandidatesForGivenMatch(mozilla::dom::TextDirectiveCandidate const&, mozilla::dom::RangeContentCache&) const::{lambda(nsRange*, nsTString<char16_t> const&, nsRange*, nsTString<char16_t> const&, mozilla::dom::TextScanDirection, mozilla::Maybe<mozilla::RangeBoundaryBase<nsCOMPtr<nsINode>, nsCOMPtr<nsIContent> > >)#1}::operator()(nsRange*, nsTString<char16_t> const&, nsRange*, nsTString<char16_t> const&, mozilla::dom::TextScanDirection, mozilla::Maybe<mozilla::RangeBoundaryBase<nsCOMPtr<nsINode>, nsCOMPtr<nsIContent> > >) const [clone .isra.0]

Similar reports
Problem #756485
Component
firefox
Last affected version
0:137.0-2.fc42
Executable
/usr/lib64/firefox/firefox
Error name
SIGSEGV 11
First occurrence
2025-07-06
Last occurrence
2025-07-06
Unique reports
1
Quality
-72

Statistics

Operating system Unique / Total count
Fedora 42 1 / 2
Operating system Count
Fedora 42 2
Architecture Count
x86_64 2
Related packages Count
firefox 2
 0:137.0-2.fc42 2

Packages names with count less than the total count of reports are most probably not the cause of the problem.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.

History

Daily:

Weekly:

Monthly:

No reports in the last 20 days.

No reports in the last 20 weeks.


Backtrace

Frame # Function Binary Source or offset Line
1
mozilla::dom::TextDirectiveCandidate::CreateNewCandidatesForGivenMatch(mozilla::dom::TextDirectiveCandidate const&, mozilla::dom::RangeContentCache&) const::{lambda(nsRange*, nsTString<char16_t> const&, nsRange*, nsTString<char16_t> const&, mozilla::dom::TextScanDirection, mozilla::Maybe<mozilla::RangeBoundaryBase<nsCOMPtr<nsINode>, nsCOMPtr<nsIContent> > >)#1}::operator()(nsRange*, nsTString<char16_t> const&, nsRange*, nsTString<char16_t> const&, mozilla::dom::TextScanDirection, mozilla::Maybe<mozilla::RangeBoundaryBase<nsCOMPtr<nsINode>, nsCOMPtr<nsIContent> > >) const [clone .isra.0]
/usr/lib64/firefox/libxul.so 0x10e0500
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
2
mozilla::dom::TextDirectiveCreator::CreateTextDirectiveFromRange(mozilla::dom::Document&, nsRange*)
/usr/lib64/firefox/libxul.so 0x10e553a
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
3
mozilla::dom::FragmentDirective_Binding::createTextDirective_promiseWrapper(JSContext*, JS::Handle<JSObject*>, void*, JSJitMethodCallArgs const&) [clone .lto_priv.0]
/usr/lib64/firefox/libxul.so 0x1670861
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
4
bool mozilla::dom::binding_detail::GenericMethod<mozilla::dom::binding_detail::NormalThisPolicy, mozilla::dom::binding_detail::ConvertExceptionsToPromises>(JSContext*, unsigned int, JS::Value*)
/usr/lib64/firefox/libxul.so 0x3360ecb
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
5
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2c7e2e8
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
6
js::jit::DoCallFallback(JSContext*, js::jit::BaselineFrame*, js::jit::ICFallbackStub*, unsigned int, JS::Value*, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2cd8bf0
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
7
anonymous function
/usr/lib64/firefox/libxul.so 0x821526e57e4 -
8
anonymous function
/usr/lib64/firefox/libxul.so 0x821526eb116 -
9
anonymous function
/usr/lib64/firefox/libxul.so 0x821526ed2f9 -
10
anonymous function
/usr/lib64/firefox/libxul.so 0x821526e34e6 -
11
js::jit::EnterBaselineInterpreterAtBranch(JSContext*, js::InterpreterFrame*, unsigned char*)
/usr/lib64/firefox/libxul.so 0x2cc53f4
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
12
js::Interpret(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2c79a40
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
13
js::RunScript(JSContext*, js::RunState&)
/usr/lib64/firefox/libxul.so 0x2c6ddcb
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
14
js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct, js::CallReason)
/usr/lib64/firefox/libxul.so 0x2c7e41c
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
15
JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>)
/usr/lib64/firefox/libxul.so 0x2dc45e7
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
16
mozilla::dom::MessageListener::ReceiveMessage(mozilla::dom::BindingCallContext&, JS::Handle<JS::Value>, mozilla::dom::ReceiveMessageArgument const&, JS::MutableHandle<JS::Value>, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x2eced22
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
17
mozilla::dom::JSActor::CallReceiveMessage(JSContext*, mozilla::dom::JSActorMessageMeta const&, JS::Handle<JS::Value>, JS::MutableHandle<JS::Value>, mozilla::ErrorResult&)
/usr/lib64/firefox/libxul.so 0x3142349
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
18
mozilla::dom::JSActorManager::ReceiveRawMessage(mozilla::dom::JSActorMessageMeta const&, mozilla::Maybe<mozilla::dom::ipc::StructuredCloneData>&&, mozilla::Maybe<mozilla::dom::ipc::StructuredCloneData>&&)
/usr/lib64/firefox/libxul.so 0x3141dde
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
19
mozilla::dom::PWindowGlobalChild::OnMessageReceived(IPC::Message const&) [clone .cold]
/usr/lib64/firefox/libxul.so 0x29cf79
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
20
mozilla::dom::PContentChild::OnMessageReceived(IPC::Message const&)
/usr/lib64/firefox/libxul.so 0x20a8daf
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
21
mozilla::ipc::MessageChannel::DispatchMessage(mozilla::ipc::ActorLifecycleProxy*, mozilla::UniquePtr<IPC::Message, mozilla::DefaultDelete<IPC::Message> >)
/usr/lib64/firefox/libxul.so 0x2db9b42
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
22
mozilla::ipc::MessageChannel::MessageTask::Run()
/usr/lib64/firefox/libxul.so 0x2db956b
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
23
mozilla::TaskController::DoExecuteNextTaskOnlyMainThreadInternal(mozilla::detail::BaseAutoLock<mozilla::Mutex&> const&)
/usr/lib64/firefox/libxul.so 0x2dc8027
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
24
mozilla::TaskController::ProcessPendingMTTask(bool)
/usr/lib64/firefox/libxul.so 0x2dc7940
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
25
nsThread::ProcessNextEvent(bool, bool*)
/usr/lib64/firefox/libxul.so 0x2b546e8
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
26
mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0x2ea59a2
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
27
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x31b58c3
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
28
nsBaseAppShell::Run()
/usr/lib64/firefox/libxul.so 0x3443e4d
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
29
nsAppShell::Run()
/usr/lib64/firefox/libxul.so 0x3443029
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
30
mozilla::ipc::MessagePumpForChildProcess::Run(base::MessagePump::Delegate*)
/usr/lib64/firefox/libxul.so 0xbc4010
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
31
MessageLoop::Run()
/usr/lib64/firefox/libxul.so 0x31b58c3
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
32
XRE_InitChildProcess(int, char**, XREChildData const*)
/usr/lib64/firefox/libxul.so 0x271ac51
Build id: 5b06ae06666681ee49eeae77ad40722b92708d6e 		-
33
main
/usr/lib64/firefox/firefox 0x3d8a7
Build id: 07513b79c8860557f7b517808495e730a522128d 		-
34
__libc_start_call_main
/lib64/libc.so.6 0x35f5
Build id: 3b8c8c659881d430486b1a3fc3f4fdc46f03102b 		-
35
__libc_start_main@@GLIBC_2.34
/lib64/libc.so.6 0x36a8
Build id: 3b8c8c659881d430486b1a3fc3f4fdc46f03102b 		-
36
_start
/usr/lib64/firefox/firefox 0x3a8f5
Build id: 07513b79c8860557f7b517808495e730a522128d 		-